All Good Validation
DevSecOps Enterprise Pipeline / security-gate-and-deploy (pull_request) Successful in 1m30s

This commit is contained in:
pm
2026-06-16 01:24:40 +01:00
parent 0d221313e9
commit a6a7f3b0b5
2 changed files with 0 additions and 33 deletions
-9
View File
@@ -36,15 +36,6 @@ describe('Enterprise Application Flow & API Validation', () => {
expect(response.status).toBe(404);
});
// OWASP ZAP (/api/search)
/* it('Should reflect the search query in the HTML response (/api/search) - Vulnerable to XSS', async () => {
const maliciousPayload = '<script>alert("ZAP")</script>';
const response = await request(app).get(`/api/search?q=${maliciousPayload}`);
expect(response.status).toBe(200);
// Verifica se o payload é refletido exatamente como entrou (confirmando a vulnerabilidade)
expect(response.text).toContain(`Resultados para: ${maliciousPayload}`);
});*/
});
// ==========================================